--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T18:34:14Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T18:34:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-29T18:34:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-29T18:34:14Z" name: csr-qgnx2 resourceVersion: "6125" uid: f89e3d05-1e16-411f-adf8-f11a720da3df spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=cf76808f2fcb5d124bf543bb0d5cbdf805395bce8729a97cafb7b1306ad26f69 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T18:34:14Z" lastUpdateTime: "2026-07-29T18:34:14Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved